#cwe-407

共收录 257 条相关情报。

漏洞预警2026-07-08 发布INFO

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo._read() in archiveinfo.py use...

CVE-2026-55206

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryptio

历史摘要 · 未重新核验 · NVD

#cve #cwe-407

安全公告2026-07-08 发布INFO

Parse Server: Denial of service via exponential-time processing of deeply nested query operators

CVE-2026-57480

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1-a

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-407

安全公告2026-07-08 发布INFO

py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()

CVE-2026-55206

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryptio

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-407

漏洞预警2026-07-08 发布INFO

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct reference-link definitions causes quadra...

CVE-2026-59928

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repe

历史摘要 · 未重新核验 · NVD

#cve #cwe-407 #cwe-1333

漏洞预警2026-07-08 发布INFO

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-asterisk or triple-asterisk emphasis pairs around a characte...

CVE-2026-59925

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-ast

历史摘要 · 未重新核验 · NVD

#cve #cwe-407 #cwe-1333

漏洞预警2026-07-08 发布INFO

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic wor...

CVE-2026-59922

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or c

历史摘要 · 未重新核验 · NVD

#cve #cwe-407 #cwe-1333

漏洞预警2026-07-08 发布INFO

linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test() and .match() can be invoked at every mailto: oc...

CVE-2026-59887

linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used b

历史摘要 · 未重新核验 · NVD

#cve #cwe-407

安全公告2026-07-08 发布INFO

Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions

CVE-2026-59928

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repe

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1333 #cwe-407

安全公告2026-07-08 发布INFO

inline_parser: quadratic-time parsing on long runs of `x` and `x` emphasis pairs

CVE-2026-59925

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-ast

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1333 #cwe-407

漏洞预警2026-07-08 发布INFO

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.Set keep keys that share the same 32-bit hash in a HashCol...

CVE-2026-59880

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.S

历史摘要 · 未重新核验 · NVD

#cve #cwe-407

漏洞预警2026-07-08 发布INFO

js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.1, YAML11_SCHEMA support for the !!omap tag in src/tag/sequence/omap.ts uses omapTag.addItem() to perform a...

CVE-2026-59870

js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.1, YAML11_SCHEMA support for the !!omap tag in src

历史摘要 · 未重新核验 · NVD

#cve #cwe-407

漏洞预警2026-07-08 发布INFO

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows on...

CVE-2026-59869

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend

历史摘要 · 未重新核验 · NVD

#cve #cwe-407

漏洞预警2026-07-08 发布INFO

js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend quadratic CPU time parsing a document whose size grows on...

CVE-2026-59868

js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend

历史摘要 · 未重新核验 · NVD

#cve #cwe-407

安全公告2026-07-08 发布INFO

Mistune plugins/formatting: quadratic-time parsing on long runs of `x`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)

CVE-2026-59922

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or c

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1333 #cwe-407

安全公告2026-07-08 发布INFO

linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

CVE-2026-59887

linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used b

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-407

安全公告2026-07-08 发布INFO

Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

CVE-2026-59880

Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.S

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-407

安全公告2026-07-08 发布INFO

js-yaml: YAML merge-key chains can force quadratic CPU consumption

CVE-2026-59868

js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-407

安全公告2026-07-08 发布INFO

js-yaml: YAML merge-key chains can force quadratic CPU consumption

CVE-2026-59869

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-407

安全公告2026-07-08 发布INFO

js-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsing

CVE-2026-59870

js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.1, YAML11_SCHEMA support for the !!omap tag in src

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-407

漏洞预警2026-07-06 发布INFO

Inefficient Algorithmic Complexity vulnerability in elixir-mint hpax allows unauthenticated denial-of-service via unbounded HPACK integer decoding. hpax decodes HPACK variable-...

CVE-2026-58226

Inefficient Algorithmic Complexity vulnerability in elixir-mint hpax allows unauthenticated denial-of-service via unboun

历史摘要 · 未重新核验 · NVD

#cve #cwe-407